Free tool · CentaurNexus

Test your PAC file - which line fires for which URL?

Paste your PAC file or upload it, enter one or more test URLs. You'll instantly see the result (DIRECT/PROXY) and which return line in the source produced it.

Your PAC file never leaves your machine: evaluation runs in an isolated browser sandbox with no network access.

PAC file

Paste the text or choose a file.

FindProxyForURL(url, host)

Result

Hints

Build and test it here.

CentaurNexus supports controlled individual changes in approved Zscaler workflows – with tenant policy, audit and read-back.

View product demo

Frequently asked questions

What does the PAC Tester do?

It runs the FindProxyForURL function of your PAC file against one or more test URLs and shows the result (DIRECT or PROXY host:port) plus which return line in the source produced it.

Does my PAC file leave my machine?

No. Evaluation runs entirely in the browser in an isolated sandbox (sandboxed iframe without network or parent-window access); there is no server round trip.

Can the PAC Tester simulate real DNS resolution?

No, deliberately not. Real DNS resolution would require a network request and would contradict the promise that the PAC file never leaves your machine. Functions like dnsResolve or isInNet with hostnames therefore return a documented empty value for hostnames instead of a fabricated answer - for IP addresses they work normally.

Which PAC functions are supported?

The complete standard Netscape PAC API: isPlainHostName, dnsDomainIs, localHostOrDomainIs, isInNet, shExpMatch, dnsDomainLevels, weekdayRange, dateRange, timeRange, plus the IPv6 extensions isInNetEx/isResolvableEx/myIpAddressEx. Date/time and the simulated local IP can be set for reproducible tests.

What is the difference between a DIRECT and a PROXY result?

DIRECT means the browser should connect straight to the destination without going through a proxy. PROXY host:port means the request should go through that proxy server first; when a PAC file lists several proxies separated by semicolons, the browser tries them in order and falls back to the next one if the first fails.

Can I test several URLs against my PAC file at the same time?

Yes. Add as many test URL rows as you need with the '+ another URL' button; each one is evaluated separately and gets its own result and matching line.

What happens if my PAC file has a syntax error?

The tester catches it and reports a syntax error message instead of a result, so you know the file needs fixing before it can be evaluated against any URL.

Does the tester only show the result, or does it also flag problems with how the PAC file is written?

Both. Alongside the DIRECT/PROXY result for each URL, the tester runs a set of hints that flag issues in the PAC source itself, shown separately as errors, warnings or informational notes.

Can I test how my PAC file behaves at a specific time or on a weekend?

Yes. The simulated date and time field lets you set the value used for functions like weekdayRange, dateRange and timeRange, so you can reproduce time-based routing logic without waiting for the actual day or hour to arrive.

CentaurNexus is an independent product of SourcingBlox GmbH and the optimal complement to your Zscaler Security Stack - not an offering from Zscaler, Inc. Product and brand names belong to their respective owners. This tool is a non-binding self-assessment provided without warranty; real DNS resolution is deliberately not simulated (see FAQ).